| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash5ceaca9fd4ad000cb435820812fc69c8 8168397aaf7b572c89a9c83f46c0b65e4ac509f2 9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15944
Expires: Wed, 07 Dec 2022 07:44:24 GMT
Date: Wed, 07 Dec 2022 03:18:40 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf83c5e33ba42e312ee398848bbb711f5 caa1fd23b1fbbe883292ded04404c1cfd861eb09 106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 397
Cache-Control: max-age=112755
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:40 GMT
Etag: "638f19f6-1d7"
Expires: Thu, 08 Dec 2022 10:37:55 GMT
Last-Modified: Tue, 06 Dec 2022 10:31:18 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hasha0abf10fb7e96c1c98dacf2f013a68b4 acdd839bce85eadc78a8e821e32e00a958d5c0c8 b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15974
Expires: Wed, 07 Dec 2022 07:44:54 GMT
Date: Wed, 07 Dec 2022 03:18:40 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash30db107dcf4380cef05efea409c2e6a3 96e6a306fbc07299aba64e5c14e2bfca35872fa9 b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 02:18:44 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3596
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DTWdaVzqc+usAqwn86RrqXgNlG5laYqj7YWOYp6VDOce5qWIZV/QSSV7ViLPaf+vBe/09DDOrC0=
x-amz-request-id: X282669VG6FQ24RT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 02:49:12 GMT
age: 1768
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 03:18:40 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| fastlnd.com/ep.php/JK-prmagms:76214/68383:fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae?crpx=R8_5120611900 | 54.213.32.76 | 302 Found | 0 B |
URL HTTP/1.1fastlnd.com/ep.php/JK-prmagms:76214/68383:fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae?crpx=R8_5120611900 IP54.213.32.76:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ep.php/JK-prmagms:76214/68383:fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae?crpx=R8_5120611900 HTTP/1.1
Host: fastlnd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 07 Dec 2022 03:18:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=FkHB07hY9/Fbe8gog5RDaJ+5Hfzx2HpRn2kpg8Jqj6B7GKPi+ovAb18K6TGtms1QM5qC3zynK6M9jRfw7ooXl577BuOpJ7qDPzJz3/OupVgIsu68+froWOYU38f8; Expires=Wed, 14 Dec 2022 03:18:40 GMT; Path=/
AWSALBCORS=FkHB07hY9/Fbe8gog5RDaJ+5Hfzx2HpRn2kpg8Jqj6B7GKPi+ovAb18K6TGtms1QM5qC3zynK6M9jRfw7ooXl577BuOpJ7qDPzJz3/OupVgIsu68+froWOYU38f8; Expires=Wed, 14 Dec 2022 03:18:40 GMT; Path=/; SameSite=None
vip_id=68383.47360-923404; expires=Sat, 10-Dec-2022 03:18:40 GMT; Max-Age=259200; path=/
Server: Apache
Location: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 03:11:20 GMT
cache-control: public,max-age=3600
age: 440
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash0f7dcaa590e32cfd1c075255188d5f06 d4bb4954fefdb3b59560b54adf500e806e252e39 195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 375
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:40 GMT
Last-Modified: Wed, 07 Dec 2022 03:12:25 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp2.globalsign.com/gsalphasha2g2 |  104.18.20.226 | 200 OK | 1.4 kB |
URL HTTP/1.1ocsp2.globalsign.com/gsalphasha2g2 IP104.18.20.226:0
Hash02aec2028a94d06e8704eca63cbf46d2 f19dcb1d0e83e802231e806d41e7fdffb9517698 4d38d83e59f135ac8b44dfb13ef829448fc27d1733292fb35333f4556b1a20bc
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:18:40 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 11 Dec 2022 01:34:53 GMT
ETag: "f19dcb1d0e83e802231e806d41e7fdffb9517698"
Last-Modified: Wed, 07 Dec 2022 01:34:54 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775a1d87be14fac8-OSL
|
|
| push.services.mozilla.com/ | 100.20.30.105 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP100.20.30.105:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZPcrqSqLhE3mS1Uj2cmLoQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 70hVroostEkZxl/vHbIF8ma/W7U=
|
|
| ezjoinflow.com/src/click12/css/base2.css |  163.171.128.172 | 200 OK | 9.1 kB |
URL HTTP/2ezjoinflow.com/src/click12/css/base2.css IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
File typeASCII text, with very long lines (472) Hash094b3ec1f177fc9d159f11545d75fc04 bf025b3b012844ecc8f46574093e446ceaeb00bd af7e94ed00f1ec0e13baf2a6ec7080021dc3a84e03c07b7ad499d0b86564bdab
GET /src/click12/css/base2.css HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: text/css
content-length: 9119
server: PWS/8.3.1.0.8
last-modified: Tue, 02 Mar 2021 21:27:11 GMT
etag: "603eadaf-239f"
accept-ranges: bytes
age: 44948
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1vg90:8 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 63900611_PSdgflkfFRA1gi91_19986-2000
X-Firefox-Spdy: h2
|
|
| ezjoinflow.com/src/click12/img/no-mute.png | 163.171.128.172 | 200 OK | 7.8 kB |
URL HTTP/2ezjoinflow.com/src/click12/img/no-mute.png IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
File typePNG image data, 413 x 337, 8-bit/color RGBA, non-interlaced\012- data Hash04b36d021d910f3d98b77e7e71717700 5d3e42784ebf508d39528c5bb5fd9d666649b933 b157d878db142022a09fe469e223c5e7fc567bd3ee468481b17c9421bbf06e6a
GET /src/click12/img/no-mute.png HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: image/png
content-length: 7777
server: PWS/8.3.1.0.8
last-modified: Thu, 07 Jan 2021 16:10:13 GMT
etag: "5ff73265-1e61"
accept-ranges: bytes
age: 44947
via: 1.1 hexi49:2 (W), 1.1 PS-FRA-01lai110:1 (W)
x-px: ht PS-FRA-01lai110FRA
x-ws-request-id: 63900611_PSdgflkfFRA1gi91_19986-2002
X-Firefox-Spdy: h2
|
|
| ezjoinflow.com/src/click12/img/mute.png | 163.171.128.172 | 200 OK | 3.6 kB |
URL HTTP/2ezjoinflow.com/src/click12/img/mute.png IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
File typePNG image data, 370 x 322, 8-bit/color RGBA, non-interlaced\012- data Hash81c68667e33c31747a20b6839c3c3d3a a60f7607bbece07e116f6d597fe7ddeef372fdd9 2055d2604c03203348da7717897338e8678ac218cdd60b8360bf59ed238b3814
GET /src/click12/img/mute.png HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: image/png
content-length: 3632
server: PWS/8.3.1.0.8
last-modified: Thu, 07 Jan 2021 16:10:13 GMT
etag: "5ff73265-e30"
accept-ranges: bytes
age: 44947
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1vg90:7 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 63900611_PSdgflkfFRA1gi91_19986-2003
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc10bc583c46449dc192a809398b4e814 ff0f7ad905d32d7f3d01e4054552d0ad551503a5 defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ezjoinflow.com/src/click12/js/jquery-2.2.4.min.js | 163.171.128.172 | 200 OK | 86 kB |
URL HTTP/2ezjoinflow.com/src/click12/js/jquery-2.2.4.min.js IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
File typeASCII text, with very long lines (32065) Hash2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /src/click12/js/jquery-2.2.4.min.js HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: application/javascript
content-length: 85578
server: PWS/8.3.1.0.8
last-modified: Thu, 07 Jan 2021 16:10:13 GMT
etag: "5ff73265-14e4a"
accept-ranges: bytes
age: 43600
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1gi91:15 (W)
x-px: ht PSdgflkfFRA1gi91FRA
x-ws-request-id: 63900611_PSdgflkfFRA1gi91_19986-2004
X-Firefox-Spdy: h2
|
|
| ezjoinflow.com/src/click12/js/iframeResizer.min.js | 163.171.128.172 | 200 OK | 12 kB |
URL HTTP/2ezjoinflow.com/src/click12/js/iframeResizer.min.js IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
File typeASCII text, with very long lines (11471) Hashf6fb142b95a0163be52282ef8b1f4b9a 271ffc93a6b6ef177b6418b6c0d1fb28624e9fb5 35a59efb7049b51b061c5b4a00d2cb1a648a047a3406d55e500f3d6349052d33
GET /src/click12/js/iframeResizer.min.js HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: application/javascript
content-length: 11799
server: PWS/8.3.1.0.8
last-modified: Thu, 07 Jan 2021 16:10:13 GMT
etag: "5ff73265-2e17"
accept-ranges: bytes
age: 40922
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1je97:21 (W)
x-px: ht PSdgflkfFRA1je97FRA
x-ws-request-id: 63900611_PSdgflkfFRA1gi91_19986-2005
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc10bc583c46449dc192a809398b4e814 ff0f7ad905d32d7f3d01e4054552d0ad551503a5 defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ezjoinflow.com/src/click12/css/animate.min.css | 163.171.128.172 | 200 OK | 6.3 kB |
URL HTTP/2ezjoinflow.com/src/click12/css/animate.min.css IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
Hasha17ef68f7dee3efd00bda4f8e7d13909 19fbb05f0ec2e999ee0c0054bcc2d10ed0f04e16 12751e761f7554356263e9c731ee42d64843ed8c89a390078b6ec839d32a51d2
GET /src/click12/css/animate.min.css HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: text/css
server: PWS/8.3.1.0.8
last-modified: Thu, 07 Jan 2021 16:10:13 GMT
etag: W/"5ff73265-e28d"
content-encoding: gzip
age: 44948
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1vg90:16 (W)
x-px: ht PSdgflkfFRA1vg90FRA
x-ws-request-id: 63900611_PSdgflkfFRA1gi91_19986-1999
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashe24f2da4ed2e3cd07b0999a67550d634 6e2277e734fd0015849c3554dd2cf2ae289c2cf2 74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashe24f2da4ed2e3cd07b0999a67550d634 6e2277e734fd0015849c3554dd2cf2ae289c2cf2 74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data Hashac0d2859ea5f8fd6bcb3c305c08ec184 7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7 ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ezjoinflow.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 06:30:11 GMT
expires: Sat, 02 Dec 2023 06:30:11 GMT
cache-control: public, max-age=31536000
age: 420510
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashec6ece82a7cb8faa3ba171efae3a9eda 7ee75fba9a9d1078960f7834d71961c38f514b82 301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp2.globalsign.com/gsalphasha2g2 | 104.18.20.226 | 200 OK | 1.4 kB |
URL HTTP/1.1ocsp2.globalsign.com/gsalphasha2g2 IP104.18.20.226:0
Hashfbbcc2ef873e82795f9e646b04926d00 53be29bcd5361c1026efec073b63dcc3a4c1891e 7074e3317d0ebe303fb2aadb93adb1e42e67081409dda8568c5c8174b72aeaf9
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:18:41 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 11 Dec 2022 01:34:57 GMT
ETag: "53be29bcd5361c1026efec073b63dcc3a4c1891e"
Last-Modified: Wed, 07 Dec 2022 01:34:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775a1d8e2f11fac8-OSL
|
|
| ocsp2.globalsign.com/gsalphasha2g2 | 104.18.20.226 | 200 OK | 1.4 kB |
URL HTTP/1.1ocsp2.globalsign.com/gsalphasha2g2 IP104.18.20.226:0
Hashfbbcc2ef873e82795f9e646b04926d00 53be29bcd5361c1026efec073b63dcc3a4c1891e 7074e3317d0ebe303fb2aadb93adb1e42e67081409dda8568c5c8174b72aeaf9
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:18:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 11 Dec 2022 01:34:57 GMT
ETag: "53be29bcd5361c1026efec073b63dcc3a4c1891e"
Last-Modified: Wed, 07 Dec 2022 01:34:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775a1d8ed977b527-OSL
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7048
Expires: Wed, 07 Dec 2022 05:16:10 GMT
Date: Wed, 07 Dec 2022 03:18:42 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7048
Expires: Wed, 07 Dec 2022 05:16:10 GMT
Date: Wed, 07 Dec 2022 03:18:42 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7048
Expires: Wed, 07 Dec 2022 05:16:10 GMT
Date: Wed, 07 Dec 2022 03:18:42 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0a317faf49d8e057d1da40f9441b6c30 f01497a3eef693b70b18885156f63c9c7305ed7e 5687e273eefa9ba3733fabe234e52bc7db87b4ec6244d12077c5816ae7961576
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12259
x-amzn-requestid: db1b424e-af8a-4a6f-92dc-27ccf3256d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: coKPCHc9oAMFygg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638cbd93-56c293d73368cab66819d31e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 15:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VsWEwb3ynI-AP3uWwVHM6I7aY3f0TBLvge2Znt7hNIXlNtMbvpKmBQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 08:00:53 GMT
age: 69469
etag: "f01497a3eef693b70b18885156f63c9c7305ed7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg | 34.120.237.76 | 200 OK | 7.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc9257f2e3b9bd1b3aa262b0f4bf57968 4bcdd6ecd63834aa1010faf19457a97f37ae99fa 9afd592279c51b533b3bf72a860cf4a8f2bc6cf01b07d1ab6f11f0ff302e0ef6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feeb81330-af0b-4cc3-bd0e-591ba064667a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7392
x-amzn-requestid: f4b6890a-7a8f-48f8-b2af-365cb5f681e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpwREFiXoAMFSMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d60d3-009e524f30c72d0629c877bb;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 03:09:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C0-H0LUbxaxMEXoDf6PXEFAvVTj2D9K2M7eshRo39QzAAWSk2ubepA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 03:51:07 GMT
age: 84455
etag: "4bcdd6ecd63834aa1010faf19457a97f37ae99fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb89a7fe1080499e4f7171f962b57fec4 62ef59be034071e667e3476ea0740077c86778c1 e17432ce6af0006ba36fd43e13c56c1bd1dd9b1d1bc250309bc2731ac8f52abb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8906
x-amzn-requestid: 453c8d4f-205d-46ac-8d24-1c9849d71419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvmAyEMnoAMFZwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb6d1-7b5051335073a5d2339e02e1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:40:33 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2LpJmaGp8UzaZHqa9WtCTvFq0oQYOVNAdKBdYHURf2d2v5fh7j44uQ==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
age: 19283
etag: "62ef59be034071e667e3476ea0740077c86778c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash98d2cf29c710d25bd2f03ff216fdd369 b8eb2e11f9655f19334befc036f21489a6473827 614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
age: 19283
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e484ee7-12d9-41dc-b674-890c51c30626.png | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e484ee7-12d9-41dc-b674-890c51c30626.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb079607b368263e3517dd30250f5f2af a1b7863c70f1d501560a5b2fb4442f4835f94341 e7ed3ed2aca312d82fb017e06c6493fafffff9a603d1498c9c05355c08b444e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e484ee7-12d9-41dc-b674-890c51c30626.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5913
x-amzn-requestid: 355ca338-7d8e-4a60-a491-0509d0ff32d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlirF3DIAMF-vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb610-5bff7b5b3984102e1ef0e737;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RlnA4SSUIbIVtGBxqBtabKw58aXWE-jGIKLZ4DnoTiGzvH5bzBOUbA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:57:19 GMT
etag: "a1b7863c70f1d501560a5b2fb4442f4835f94341"
content-type: image/jpeg
age: 19283
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg | 34.120.237.76 | 200 OK | 9.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf38ce0fb35ef0fc66b61cafd2b09eeb6 aded2fe97a129dc820ba9d6d7605aeadfe17c15c 39bcb5e0c3a9cd39c0fcefbffd9e6f949bb9d85f0bee2b0b7c5cb999b508b1c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9781
x-amzn-requestid: 24355473-a83a-42b6-bdf3-ae2c39f7f3eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ccq48GfKoAMFjmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63882505-2f58dd012665cb131ceff8f2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 03:52:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VySWUb7U2HlkyL8T1PCOzSDXNSDJDRIIF1PAnwaK2DHiGJFGGzRCOQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:30:30 GMT
age: 17292
etag: "aded2fe97a129dc820ba9d6d7605aeadfe17c15c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ezjoinflow.com/src/click12/img/favicon.ico | 163.171.128.172 | 200 OK | 606 B |
URL HTTP/2ezjoinflow.com/src/click12/img/favicon.ico IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash9ac07e43225983cd1e4a31bb05f86cf4 fcb6d50d066c5104e954ab73ffaecc013af6c654 8cac4f9bbca79590d43b31099ca744cf6fe4745df21506414b547580a6f70913
GET /src/click12/img/favicon.ico HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa; HOY_TR=CMQEJNLGBTRWSXYO,4785269A13BCDEF0,fhwsrgqztkubjlmo; HBB_HC=cadb0185e2700cae6d5f8ec93e58037ea9c445c72519ce370b409a1b3ab213353f355a92652613732d519f18311e665fde
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:42 GMT
content-type: image/x-icon
content-length: 606
server: PWS/8.3.1.0.8
last-modified: Wed, 11 Aug 2021 18:11:05 GMT
etag: "611412b9-25e"
accept-ranges: bytes
age: 41692
via: 1.1 hexi49:2 (W), 1.1 PSdgflkfFRA1gi91:7 (W)
x-px: ht PSdgflkfFRA1gi91FRA
x-ws-request-id: 63900612_PSdgflkfFRA1gi91_19986-2023
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash12783d6e0e25fe51cfb3fadd700a0399 6ee7163124cbc78d35618cca478644c3d6fc1e7b 615ed6726b9e2d91ee135cad98e506b8ffba943ab6a7ae94880c9b79d370feb6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "615ED6726B9E2D91EE135CAD98E506B8FFBA943AB6A7AE94880C9B79D370FEB6"
Last-Modified: Tue, 06 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4775
Expires: Wed, 07 Dec 2022 04:38:17 GMT
Date: Wed, 07 Dec 2022 03:18:42 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash8067d1564fcd54588a416855d2691302 697a929f61f4872b0d7f933db1fe4569284f0f66 2dc43da9510808f0710170113ce6893d25881f1b82bc751379a5cdbc050a2432
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5268
Cache-Control: max-age=123362
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:43 GMT
Etag: "638f3061-1d7"
Expires: Thu, 08 Dec 2022 13:34:45 GMT
Last-Modified: Tue, 06 Dec 2022 12:06:57 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashfc2588383a243df01d1255141b903d58 4b5d8ef65adff20fb016f71fc106058c39b6de46 9c302444a6061fae42d35bed8925886e8a40da5451854bb8532609fc8fcbe4af
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css | 152.199.19.160 | 200 OK | 20 kB |
URL HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css IP152.199.19.160:0
File typeASCII text, with very long lines (65371) Hash7e2bb6028f0b19917a1a2d1944fc72b1 e1837fc75ee2ddd24c6e1df6b309ea212b57e681 cc6093bd7162882fd34252fb5d3e8e7d07247e3b70fad894320bf2a960abeda5
GET /ajax/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 15109859
cache-control: public,max-age=31536000
content-type: text/css
date: Wed, 07 Dec 2022 03:18:43 GMT
etag: "0e914f2cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:10:18 GMT
server: ECAcc (ska/F740)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 19629
X-Firefox-Spdy: h2
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js | 152.199.19.160 | 200 OK | 9.8 kB |
URL HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js IP152.199.19.160:0
File typeASCII text, with very long lines (32033) Hash432ca07a1a844dbb27f9e0ab0d468be5 7fdaf858d702f84536a515c675b4028ce2eb0cfa 12732099d21835fabf83a93eec52f7cf1847cd64a0572d18917b2e13b06d5cf0
GET /ajax/bootstrap/3.3.7/bootstrap.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 12015668
cache-control: public,max-age=31536000
content-type: application/javascript
date: Wed, 07 Dec 2022 03:18:43 GMT
etag: "80bdc1e6cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:09:59 GMT
server: ECAcc (ska/F6C5)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9839
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js | 142.250.74.10 | 200 OK | 31 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP142.250.74.10:0
File typeASCII text, with very long lines (65451) Hash81182f4b684635f6bdcbdd907ee66f25 a1f2f151df72ede41397c8131bd47a3ce85575b3 be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 11:09:21 GMT
expires: Wed, 06 Dec 2023 11:09:21 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 58162
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashfc2588383a243df01d1255141b903d58 4b5d8ef65adff20fb016f71fc106058c39b6de46 9c302444a6061fae42d35bed8925886e8a40da5451854bb8532609fc8fcbe4af
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:18:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| bkdwbvx.com/common_tpls/compactML/css/epcg1.css | 207.120.33.203 | 200 OK | 7.9 kB |
URL HTTP/2bkdwbvx.com/common_tpls/compactML/css/epcg1.css IP207.120.33.203:0
File typeASCII text, with very long lines (40814), with no line terminators Hash38b346d24f8adf0e43f7e1bf88ec9704 fc9aae992cd4910a4796d887671358e97e88fe49 be0b3580654dcc9c6a0286acb104a2a6a845b159eb8a5f160e23c96898308c78
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/compactML/css/epcg1.css HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: text/css
content-length: 7887
last-modified: Tue, 10 May 2022 18:09:07 GMT
etag: "627aaa43-9f6e"
content-encoding: gzip
vary: Accept-Encoding
section-io-cache-id: 2be24e75ec04736a2a775b750c8191cd
x-varnish: 4781068 4832574
age: 669
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 94d1af72e08592aa70bc4d322119b3c9
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/images/icons/email.png | 207.120.33.203 | 200 OK | 1.3 kB |
URL HTTP/2bkdwbvx.com/common_tpls/images/icons/email.png IP207.120.33.203:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hasha86d99b9176d82a211cfa29b2f0b353f 62947ddfd87e3a21869818885e4bfa4e55ad0c11 f8e82194c97e2a11a8c77fcd55d1ded51a1943b78eefac8475890f665dc620f1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/images/icons/email.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: image/png
content-length: 1254
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-4e6"
section-io-cache-id: d296bc86c7741d94f73452bad28faf1f
x-varnish: 3620396 2977800
age: 1432
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: d5fdcf35d96081e15d0824657830de30
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/images/icons/password.png | 207.120.33.203 | 200 OK | 1.5 kB |
URL HTTP/2bkdwbvx.com/common_tpls/images/icons/password.png IP207.120.33.203:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hash6f100f1cdbdce928118ffa4c9293ca5b 6b1a3593e792d4c00187d60560dd03fb42df1156 8c1a6b9e0c63edc7fa86898148dc6493cd56113fabbf85d901f7af4c180fce74
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/images/icons/password.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: image/png
content-length: 1452
last-modified: Tue, 22 Aug 2017 16:34:59 GMT
etag: "599c5d33-5ac"
section-io-cache-id: 7af7af17bf57f579738c647edc3ab0e1
x-varnish: 4781071 4354509
age: 1359
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 708bc42552f03619dfdda69f7b50aec4
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/images/icons/fname.png | 207.120.33.203 | 200 OK | 1.6 kB |
URL HTTP/2bkdwbvx.com/common_tpls/images/icons/fname.png IP207.120.33.203:0
File typePNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data Hash5c846870756544f39604e671d4111b9d 304938c74246e228fa82d8ca40201c3db6098074 d43abf8c5665519a3fe3f7e90298fc17b62e06d8ada1b90a44ea9985a62abb4d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/images/icons/fname.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: image/png
content-length: 1649
last-modified: Tue, 28 Nov 2017 20:52:02 GMT
etag: "5a1dcc72-671"
section-io-cache-id: 70aa23b9d917d6ab29e058b24bd53abd
x-varnish: 3620397 3807538
age: 1520
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 6888c585546e14ceb10e8fb7e30612c9
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/images/icons/address.png | 207.120.33.203 | 200 OK | 1.2 kB |
URL HTTP/2bkdwbvx.com/common_tpls/images/icons/address.png IP207.120.33.203:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hashb579e9868402d708e54e1a980166c444 1c58e2890b934c0b1ab057f3ac28bedd2a082d19 67756f8b542c7823bcdba421219c3b8e1ee472748d8c3463534f667271356dfb
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/images/icons/address.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: image/png
content-length: 1167
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-48f"
section-io-cache-id: 09d38a0f76cd1b7586dcb94c75b76e3e
x-varnish: 4781072 5999721
age: 1508
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 79d7a8ff55a53abdc1e084dfa23ff708
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 54 kB |
URL HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 IP104.18.23.52:0
File typeASCII text, with very long lines (65397) Hashdc9270247a97f75913a5d8934c24de03 ed9b0fa01b552571f99d529ed355b2ba91cfc48d 847cc3ab1ea736cbbaac34833596335471fc7a888089b501b3c83a323566f0b8
GET /releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bkdwbvx.com/
Origin: https://bkdwbvx.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: text/css
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 461859
accept-ranges: bytes
server: cloudflare
cf-ray: 775a1d99f956b50f-OSL
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 4.2 kB |
URL HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 IP104.18.23.52:0
File typeASCII text, with very long lines (26366) Hash7fd743485fa194e25e2a207bff6c258a 97c999d752b95ee1ed6271a29aa58109dc17281e dd939d69a23f003d49287291f0bcb59df58119d60bc5f14a81cbfd957894f6dc
GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bkdwbvx.com/
Origin: https://bkdwbvx.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: text/css
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 461859
accept-ranges: bytes
server: cloudflare
cf-ray: 775a1d99f959b50f-OSL
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/js/validate_form_v2.js?jsv=29 | 207.120.33.203 | 200 OK | 8.4 kB |
URL HTTP/2bkdwbvx.com/common_tpls/js/validate_form_v2.js?jsv=29 IP207.120.33.203:0
File typeAlgol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with very long lines (27832) Hashbaa983b0d9d5f3bc961d724b49828e00 2963fac44f2ec123e7c4334f1fb23cbd75c6c16c 53f3ec80f50348420b08252aba644d0811cc0d3d1fb46b6ea48c1f0cb85062d8
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/js/validate_form_v2.js?jsv=29 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 01 Nov 2022 21:07:07 GMT
etag: W/"63618a7b-614a"
section-io-cache-id: 11d3fdd5eac315c20bb34e879bedc5c3
x-varnish: 4781070 5674997
age: 1523
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: cf998c79d7fc3afb45fe83dadf11c113
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273 | 207.120.33.203 | 200 OK | 32 kB |
URL HTTP/2bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273 IP207.120.33.203:0
Hash0e259765b9845b923a33152536af5fa9 3a27cfa1c5f80c822b58dc0835b6e27d5ac7b3b4 1d599337bcf870445c545a50a1493d06bf2cc3bbb9fb0774f3236b6285eb681c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ezjoinflow.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a; path=/; secure; SameSite=None
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
content-encoding: gzip
vary: Accept-Encoding
x-varnish: 3077840
age: 0
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Miss
section-io-id: 0119e152e60ce6ea09adb218ef386bd7
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/552.2d6a2503-1220.js | 151.101.194.137 | 200 OK | 5.9 kB |
URL HTTP/2js-agent.newrelic.com/552.2d6a2503-1220.js IP151.101.194.137:0
File typeASCII text, with very long lines (21423) Hash097ef34c5f5d635a147bca3721bd605b 3b31ef3cfb1d62d9884d631ec2467b9d6b0d46e2 3e05d4e42c1e87b516b525574b20d2570dccc50d1bd1b2956d6421699aa19914
GET /552.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PnZFPtaQ6Oa8SvsR598yLCynwQMleyjLyE8+/6kXxv1ZfRit6gnSEEKUHnQ2vqYi8syHn+Nxcq4=
x-amz-request-id: XM6WHM0J4M8X38WQ
last-modified: Wed, 05 Oct 2022 14:53:43 GMT
etag: "777ac0df4dba632ad1b2955c88dd51ac"
x-amz-version-id: 7EjqUQ3uiXAFqO0VnIOp2ymSTJq3JZwD
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 03:18:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 677
x-timer: S1670383124.008168,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 5890
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/368.2d6a2503-1220.js | 151.101.194.137 | 200 OK | 1.4 kB |
URL HTTP/2js-agent.newrelic.com/368.2d6a2503-1220.js IP151.101.194.137:0
File typeASCII text, with very long lines (3382) Hashfa50a55750d1d0978fca32be5dbc3988 a7f447621d48b3ecf7fc0192b515d506d3d1ad18 c621038fb07e536af8a1ec6d260853dfe69055dc2fb526700919c53b3b7e5f20
GET /368.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: GUwozRedGseijuU5ypA/WbbnDIf/u5E5/2u5+kb3ugz/wj5jQhWm8oFz9CQSV79o7P1yeeJAp+M=
x-amz-request-id: K9T2FMDPRF0ZCE4Q
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "16b4f3676c3859e1378a2ccdebbad675"
x-amz-version-id: zC.KoTaM7bjdFj.W4KQMilxtjXXSNPks
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 03:18:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 670
x-timer: S1670383124.057449,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1443
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/290.2d6a2503-1220.js | 151.101.194.137 | 200 OK | 3.4 kB |
URL HTTP/2js-agent.newrelic.com/290.2d6a2503-1220.js IP151.101.194.137:0
File typeASCII text, with very long lines (8544) Hashb9baa2cb6a3b1a3d0fda03cd7db51631 42d37467e05182e3cab2fcb54577dc462adcf50b 31a8b4d47298cae24c66e37256a51474ae88a745fdfec79f99b2d43608e6d822
GET /290.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: w13KyJHc6nZxbdEwslB41w8/Eu8hqTxWFthe9Ce9ktH5t1CQfPDcADzeIbbM0XmVboDReCBCqwPazqB/yCHcHQ==
x-amz-request-id: ENM21W9CJ64N9SCW
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "13898fbb4d7a1f83fc6722c4c12faf40"
x-amz-version-id: C4hj6k9j4I7xXuTBZvcbX78Bf.Ep8KMk
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 03:18:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 536
x-timer: S1670383124.057981,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3424
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/768.2d6a2503-1220.js | 151.101.194.137 | 200 OK | 2.6 kB |
URL HTTP/2js-agent.newrelic.com/768.2d6a2503-1220.js IP151.101.194.137:0
File typeASCII text, with very long lines (5523) Hash51bc651de4ca6cdaf86070a11306cc83 458007bff860173bcc0d834c8f47912ebbb8bd91 0146602e261c8228f809d97b8c0f676f6916fef6fb9fcd0c6ffaa91253273e69
GET /768.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: P4mBsEL/DTAFzpZmpgTrdkaNBJrByz58gWXjGItRhFpF6Y8vCPU2Lz0KL/HwWqBLBPUd/7ipab8=
x-amz-request-id: XM6J50R0X1MZPD9F
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "d6cc8b42eda6fd7734014b03b87b5787"
x-amz-version-id: 0CJw6LdyBdZcjhOiVrtC0pLcOFtA3d5G
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 03:18:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 728
x-timer: S1670383124.060436,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2225
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/775.2d6a2503-1220.js | 151.101.194.137 | 200 OK | 632 B |
URL HTTP/2js-agent.newrelic.com/775.2d6a2503-1220.js IP151.101.194.137:0
File typeASCII text, with very long lines (1169) Hash661520fd0dfebb919d68a69b60ca426f b85ef80a0e0d95bf4904f9ce4fad56c49ae035be ecd489671c6255fee8370fc1f8f4e99519ef8d4c4c0ab06640b0c021642e1db7
GET /775.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7LFMHtjJh1S3I7Y2nadjyW3qD5GSEUAPkhvRiGWUqI2yNIsj2jxS1WztietgESJCTo8b+MSjBS8=
x-amz-request-id: XM6WXR7ZNKJZ7WDR
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "1dfdb74c0491489bf04c6deadb56add2"
x-amz-version-id: y1AQ2bnjUbwuFOuSS5MP1vew1dGw.1iz
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 03:18:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 351
x-timer: S1670383124.064281,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 632
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/b314bdf1b3.js | 104.18.23.52 | 200 OK | 6.8 kB |
URL HTTP/2kit.fontawesome.com/b314bdf1b3.js IP104.18.23.52:0
File typeASCII text, with very long lines (10594) Hash7dfa9a0fab9fc678170198709725010e 65b49264411b528ce382adc85b7e23a85c4efcad cc5b18a9a58735ccf18d8e8e19b70bcf518d985091697715156ce4aebaf157d8
GET /b314bdf1b3.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyzAirxEebdfk--ceVWC
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 775a1d988835b50f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/js/form_support.js?v=1101202201 | 207.120.33.203 | 200 OK | 7.5 kB |
URL HTTP/2bkdwbvx.com/common_tpls/js/form_support.js?v=1101202201 IP207.120.33.203:0
File typeASCII text, with very long lines (17591) Hashe190f44757507577cb034e40cfcca09a 69d9b5d044ef5a2210754c085288e7c11687911f 6367a2fbf71e1a6cfd2476db1972f4bf5c1f8d5bdd87886d8cbc08ce4f991df3
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/js/form_support.js?v=1101202201 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 18 Nov 2022 21:23:38 GMT
etag: W/"6377f7da-ed7"
section-io-cache-id: f4c1fe21db403c36e228de4e08ba93ae
x-varnish: 3620395 3189900
age: 1511
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 2246f86a4d2ad7218d2ebfeec24af838
X-Firefox-Spdy: h2
|
|
| geoip.enlistsecureup.com/?v=1 | 163.171.128.172 | 200 OK | 2.7 kB |
URL HTTP/2geoip.enlistsecureup.com/?v=1 IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
Hash262d6f22f6fe46a7bfd7913446c4371a 7dc9bc686063becf523197baf07328af6c0ce85f 91a7f8ae772650a71b113d701992d272c49817be343bd94140b38c9fd3054d3a
GET /?v=1 HTTP/1.1
Host: geoip.enlistsecureup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: application/javascript
server: waf/4.32.3-0.el6
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-via: 1.1 PS-DFW-01gGZ147:4 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1bc200:14 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1je97:15 (Cdn Cache Server V2.0)
x-ws-request-id: 63900613_PSdgflkfFRA1gi91_19986-2058
set-cookie: HMF_CI=7f173378e6eac2d05a2bdcd2e77aa356bc22975ddd9496e27e53cd7cdea0e564436f4413e88e2126695509b3993120e7791a3ea12f0341e15b3652c52a27d1b418; Expires=Fri, 06-Jan-23 03:18:43 GMT; Path=/
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/571.2d6a2503-1220.js | 151.101.194.137 | 200 OK | 1.1 kB |
URL HTTP/2js-agent.newrelic.com/571.2d6a2503-1220.js IP151.101.194.137:0
File typeASCII text, with very long lines (2412) Hashd392a55faa7a0a2a43781a495891c9aa 1998ba6f85354606c186fa1a29285676f0b596f0 33b4cb21373961aa88430ff72406d46e95ceddf50afc086598ea5bdc3a311815
GET /571.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Cn07g451pzP+BuOyXbJ5c0o8ExPUm1rBYP/GYVQDFxcy7KzhZDW/Ep1gB0iV/QBa/UCWbkhew68=
x-amz-request-id: XM6J6T5Z32K8FRFH
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "04b00905b32fd8d29459545bc125cff6"
x-amz-version-id: ySPuP7kOqGri8HjzDqW2TYirQNYv9NMF
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 03:18:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 375
x-timer: S1670383124.080492,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1108
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/820.2d6a2503-1220.js | 151.101.194.137 | 200 OK | 3.0 kB |
URL HTTP/2js-agent.newrelic.com/820.2d6a2503-1220.js IP151.101.194.137:0
File typeASCII text, with very long lines (7460) Hash7d1295a839190615b34d5a62acceee4f eef26f5c6d2ae14cb81b3a9b669da224faceacd0 4d59d58f31b6638fbc3792a0b5fddca6e8eafc19a0c9e9aabadb5ad4d9197198
GET /820.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: mfz69jbwDdVjAOvigezanDeGlG58lNEgRQZJ5bHuLqr3T+YzVd1KlatkpX7gSSdNs3YsWLt1rsw=
x-amz-request-id: 7DG6EGGM14MJB93M
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "897a1a72a47e4f4a24c05aec49af638f"
x-amz-version-id: P6j2S.7Iht6lmVHyZ_zkYmp136j6E8IA
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 07 Dec 2022 03:18:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 211
x-timer: S1670383124.080607,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2979
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/acct/trk/?rtid=51177476273 | 207.120.33.203 | 200 OK | 504 B |
URL HTTP/2bkdwbvx.com/acct/trk/?rtid=51177476273 IP207.120.33.203:0
File typegzip compressed data, max compression\012- data Hashb2d18f774394735dc58c8c4f40b5efc9 88c4784f14110b895489e1db7617e142bba4486d 8e60094d540a4640c407f643281e70faff1018301cc8cd85e64efdd64f7ff1ba
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /acct/trk/?rtid=51177476273 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: VwUCVFRWCBAJV1dSDwkPVV0=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMzNTUyNTAiLCJhcCI6IjExMDMwNzg4NDIiLCJpZCI6IjQ1YTVjZWIzYzIxYWMyZTkiLCJ0ciI6ImMxNWU2OGM5Yjg0YTAwODc3ZGM2ODdmNzQxYjc2OTkwIiwidGkiOjE2NzAzODMxMjM3NTR9fQ==
traceparent: 00-c15e68c9b84a00877dc687f741b76990-45a5ceb3c21ac2e9-01
tracestate: 3355250@nr=0-1-3355250-1103078842-45a5ceb3c21ac2e9----1670383123754
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:44 GMT
content-type: text/json;charset=UTF-8
content-length: 21
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 3380173
age: 0
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Miss
section-io-id: 9ab2c7079eac0d2b85f380b93d41a830
X-Firefox-Spdy: h2
|
|
| bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpTA04PVwVTG0oTDEc%3D&rst=4188&ck=0&s=ec6d650ec3fa9794&ref=https://ezjoinflow.com/src/click12/&ap=17&be=1480&fe=2576&dc=990&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670383119678,%22n%22:0,%22f%22:488,%22dn%22:490,%22dne%22:606,%22c%22:606,%22s%22:635,%22ce%22:1083,%22rq%22:1083,%22rp%22:1453,%22rpe%22:1458,%22dl%22:1461,%22di%22:2466,%22ds%22:2469,%22de%22:2474,%22dc%22:4055,%22l%22:4055,%22le%22:4060%7D,%22navigation%22:%7B%7D%7D&fcp=1692&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken | 162.247.241.14 | 200 OK | 77 B |
URL HTTP/1.1bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpTA04PVwVTG0oTDEc%3D&rst=4188&ck=0&s=ec6d650ec3fa9794&ref=https://ezjoinflow.com/src/click12/&ap=17&be=1480&fe=2576&dc=990&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670383119678,%22n%22:0,%22f%22:488,%22dn%22:490,%22dne%22:606,%22c%22:606,%22s%22:635,%22ce%22:1083,%22rq%22:1083,%22rp%22:1453,%22rpe%22:1458,%22dl%22:1461,%22di%22:2466,%22ds%22:2469,%22de%22:2474,%22dc%22:4055,%22l%22:4055,%22le%22:4060%7D,%22navigation%22:%7B%7D%7D&fcp=1692&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken IP162.247.241.14:0
File typeASCII text, with no line terminators Hashf1442f5831dbbe0210da2d7a4180d6b8 2ade23c6c7a001c66f0c0a9a101ec152747b434e c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpTA04PVwVTG0oTDEc%3D&rst=4188&ck=0&s=ec6d650ec3fa9794&ref=https://ezjoinflow.com/src/click12/&ap=17&be=1480&fe=2576&dc=990&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670383119678,%22n%22:0,%22f%22:488,%22dn%22:490,%22dne%22:606,%22c%22:606,%22s%22:635,%22ce%22:1083,%22rq%22:1083,%22rp%22:1453,%22rpe%22:1458,%22dl%22:1461,%22di%22:2466,%22ds%22:2469,%22de%22:2474,%22dc%22:4055,%22l%22:4055,%22le%22:4060%7D,%22navigation%22:%7B%7D%7D&fcp=1692&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:18:44 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 775a1d9dcdd4b4f1-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
|
|
| bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=2606&ck=0&s=9171caff188f1a77&ref=https://bkdwbvx.com/acct/epc68383/add/&ap=97&be=1653&fe=740&dc=732&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670383121334,%22n%22:0,%22f%22:796,%22dn%22:797,%22dne%22:828,%22c%22:828,%22s%22:949,%22ce%22:1168,%22rq%22:1169,%22rp%22:1520,%22rpe%22:1520,%22dl%22:1524,%22di%22:2372,%22ds%22:2385,%22de%22:2392,%22dc%22:2392,%22l%22:2392,%22le%22:2398%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken | 162.247.241.14 | 200 OK | 72 B |
URL HTTP/1.1bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=2606&ck=0&s=9171caff188f1a77&ref=https://bkdwbvx.com/acct/epc68383/add/&ap=97&be=1653&fe=740&dc=732&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670383121334,%22n%22:0,%22f%22:796,%22dn%22:797,%22dne%22:828,%22c%22:828,%22s%22:949,%22ce%22:1168,%22rq%22:1169,%22rp%22:1520,%22rpe%22:1520,%22dl%22:1524,%22di%22:2372,%22ds%22:2385,%22de%22:2392,%22dc%22:2392,%22l%22:2392,%22le%22:2398%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken IP162.247.241.14:0
File typeASCII text, with no line terminators Hash107d93e382e2c9b00fbf9fb0edc65d86 77e750e3ebf9706f4f6dd253785602d70be17c6c a1ee50b689ea433a0acdccbf4ee4629e9ea3f9c4bcdd21effb334359a2f9e937
GET /1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=2606&ck=0&s=9171caff188f1a77&ref=https://bkdwbvx.com/acct/epc68383/add/&ap=97&be=1653&fe=740&dc=732&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1670383121334,%22n%22:0,%22f%22:796,%22dn%22:797,%22dne%22:828,%22c%22:828,%22s%22:949,%22ce%22:1168,%22rq%22:1169,%22rp%22:1520,%22rpe%22:1520,%22dl%22:1524,%22di%22:2372,%22ds%22:2385,%22de%22:2392,%22dc%22:2392,%22l%22:2392,%22le%22:2398%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:18:44 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 775a1d9e7d0eb521-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
|
|
| bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpTA04PVwVTG0oTDEc%3D&rst=4941&ck=0&s=ec6d650ec3fa9794&ref=https://ezjoinflow.com/src/click12/ | 162.247.241.14 | 200 OK | 24 B |
URL HTTP/1.1bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpTA04PVwVTG0oTDEc%3D&rst=4941&ck=0&s=ec6d650ec3fa9794&ref=https://ezjoinflow.com/src/click12/ IP162.247.241.14:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashbc32ed98d624acb4008f986349a20d26 2d3df8c11d2168ce2c27e0937421d11d85016361 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTklKE1VMBw8NVFpTA04PVwVTG0oTDEc%3D&rst=4941&ck=0&s=ec6d650ec3fa9794&ref=https://ezjoinflow.com/src/click12/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 189
Origin: https://ezjoinflow.com
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:18:45 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 775a1da25fd7b4f1-OSL
Access-Control-Allow-Origin: https://ezjoinflow.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
|
|
| bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3416&ck=0&s=9171caff188f1a77&ref=https://bkdwbvx.com/acct/epc68383/add/ | 162.247.241.14 | 200 OK | 24 B |
URL HTTP/1.1bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3416&ck=0&s=9171caff188f1a77&ref=https://bkdwbvx.com/acct/epc68383/add/ IP162.247.241.14:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashbc32ed98d624acb4008f986349a20d26 2d3df8c11d2168ce2c27e0937421d11d85016361 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3416&ck=0&s=9171caff188f1a77&ref=https://bkdwbvx.com/acct/epc68383/add/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 562
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:18:45 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 775a1da35f95b521-OSL
Access-Control-Allow-Origin: https://bkdwbvx.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
|
|
| ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0 | 163.171.128.172 | 200 OK | 0 B |
URL HTTP/2ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0 IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
GET /src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: text/html; charset=UTF-8
server: PWS/8.3.1.0.8
via: 1.1 PSmglsjLAX2hu177:8 (W), 1.1 CSP-A15498:5 (W)
x-px: ms CSP-A15498FRA,ms PSmglsjLAX2hu177LAX(origin)
x-ws-request-id: 63900611_PSdgflkfFRA1gi91_19986-1992
cache-control: no-store
set-cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa; Expires=Fri, 06-Jan-23 03:18:41 GMT; Path=/
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ezjoinflow.com/_ws_sbu/sbu_hc.js | 163.171.128.172 | 200 OK | 0 B |
URL HTTP/2ezjoinflow.com/_ws_sbu/sbu_hc.js IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
GET /_ws_sbu/sbu_hc.js HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: text/javascript
cache-control: no-store
server: PWS/8.3.1.0.8
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Montserrat:300,400,500,700,800&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Montserrat:300,400,500,700,800&display=swap IP142.250.74.106:0
GET /css?family=Montserrat:300,400,500,700,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 03:18:41 GMT
date: Wed, 07 Dec 2022 03:18:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| geoip.entrsecre.com/ | 163.171.128.172 | 200 OK | 0 B |
IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
GET / HTTP/1.1
Host: geoip.entrsecre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ezjoinflow.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:42 GMT
content-type: application/javascript
server: PWS/8.3.1.0.8
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
via: 1.1 PSmglsjLAX2hu177:8 (W), 1.1 PSdgflkfFRA1je97:15 (W)
x-px: ms PSdgflkfFRA1je97FRA,ms PSmglsjLAX2hu177LAX(origin)
x-ws-request-id: 63900612_PSdgflkfFRA1gi91_19986-2016
set-cookie: HMF_CI=d6ed191f41c55b342c82a0ed26c057161056180c78ea2fe568d10b0abfb96d62fc071590251080d5c1ce4d13494d2629378b0346871e8b5478b699f1ae327c968d; Expires=Fri, 06-Jan-23 03:18:42 GMT; Path=/
X-Firefox-Spdy: h2
|
|
| ezjoinflow.com/src/click12/vids/ngm3/1.mp4 | 163.171.128.172 | 206 Partial Content | 0 B |
URL HTTP/2ezjoinflow.com/src/click12/vids/ngm3/1.mp4 IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
GET /src/click12/vids/ngm3/1.mp4 HTTP/1.1
Host: ezjoinflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://ezjoinflow.com/src/click12/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0
Cookie: HMF_CI=e7eddb0f9c4e4f09a85117d9b54ab24c3e2fc7ed76365728ddbd5532c5690f379e8f611fbc7e71c3742c7fccd178fae32f9c1acb75ac4f36d4d69b7b77e6a833aa; HOY_TR=CMQEJNLGBTRWSXYO,4785269A13BCDEF0,fhwsrgqztkubjlmo; HBB_HC=cadb0185e2700cae6d5f8ec93e58037ea9c445c72519ce370b409a1b3ab213353f355a92652613732d519f18311e665fde
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Wed, 07 Dec 2022 03:18:41 GMT
content-type: video/mp4
content-length: 9137571
server: PWS/8.3.1.0.8
last-modified: Thu, 07 Jan 2021 16:10:13 GMT
etag: "5ff73265-8b6da3"
accept-ranges: bytes
content-range: bytes 0-9137570/9137571
age: 37729
via: 1.1 hexi50:2 (W), 1.1 PSdgflkfFRA1gi91:10 (W)
x-px: ht PSdgflkfFRA1gi91FRA
x-ws-request-id: 63900611_PSdgflkfFRA1gi91_19986-2007
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/js/iframeResizer.contentWindow.min.js | 207.120.33.203 | 200 OK | 0 B |
URL HTTP/2bkdwbvx.com/common_tpls/js/iframeResizer.contentWindow.min.js IP207.120.33.203:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/js/iframeResizer.contentWindow.min.js HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc68383/add/?epcVIP=63.1066.g32&email=&act=epc68383.47360-923404.fa4e05bd-5e88-4e3c-ba75-a4be7ce8a315.wshsr9tl30jqab0lijaqrtae&v=ngm3&vfx=0&ofid=1066&epcCID=E4Ofw5A9n0v6s3K4F76ao2reHbibz8Lef&rtid=51177476273
Cookie: PHPSESSID=2b31b053d8bf85f1af5db99b92d54f6a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:18:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2016 15:06:03 GMT
etag: W/"56b368db-3445"
section-io-cache-id: daa7e7d1d7e894448af260bb024297cd
x-varnish: 3620398 3842626
age: 1520
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: f9b0f15a2d19d99efff06072c985bd47
X-Firefox-Spdy: h2
|
|